Problem/Motivation

We need to prevent abuse of site trials, such as

  • Running crypto miners
  • Launching an excessive number of sites
  • Running fraudulent sites
  • Hacking

Proposed resolution

  • Verify that users are human.
  • Limit time, bandwidth, memory, storage, and processing power of trial sites.
  • If user has a trial site running, launch button launches the existing site instead of a new site.
  • Possibly use drupal.org SSO to offer more privileges to users who are signed in to drupal.org.

Remaining tasks

  • Integrate with Drupal.org SSO

Comments

Darren Oh created an issue. See original summary.

darren oh’s picture

Title: Prevent abuse of site trial period » Prevent abuse of site trials
darren oh’s picture

Issue tags: +Portland2024
darren oh’s picture

darren oh’s picture

Project: 1,000 Drupal Gardens » Drupal Forge
darren oh’s picture

Component: Code » drupalforge.org
jdleonard’s picture

Not sure whether the capability exists yet, but I think it will be possible to integrate with drupal.org SSO.

w01f’s picture

@jdleonard that's a pretty steep barrier to entry that would dissuade many prospective Drupal clients/users from using Forge to test out Drupal.

darren oh’s picture

We are trying out a solution that makes the launch button active when a user is confirmed to be human and replaces the launch button with a link to the trial site so users only run one trial at a time.

jdleonard’s picture

@w01f Fair enough. I was riffing off of "Require registration to launch sites" in the issue summary.

darren oh’s picture

Issue summary: View changes
teknorah’s picture

Issue summary: View changes